Jump to content

I think my system was hacked, what now?


Recommended Posts

I checked my log on eset this morning and this is what I saw -

I did not have any idea who or what this NT/authority was but I found out it is the system root access point above admin accounts, if I understood correctly. I only have one admin/user on the system.

There are a few examples like this. If there is communication with domains blacklisted for phishing scams form root user then I guess I should be worried. I removed the app that was causing the problem but I am most concerned about whether this risk extends to other devices on the network.

 

What steps should I take?

eset-02.jpg

Edited by VanillaHaze
Link to post
Share on other sites
  • Administrators

Probably it's the Luminati proxy application which runs under the system account and another machine connecting via the proxy accessed the blocked url.

It's a perfectly normal detection, no sign of hacking there.

Link to post
Share on other sites

Ah, ok yes that makes sense. I knew there would be mutual resource allocation but what I didn't know or agree to was they would allow server components to access my IP / bandwidth when there front end app isn't even running - haven't connected in about 5 days. Isn't that basically backend malware?

Anyway, great little discovery for me there with your software. Thanks

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...